PlayReady Activation protocol issues (weak auth / fake client identities)
Posted by Security Explorations on Aug 12Dear All, PlayReady Communication Protocols [1] include services for PlayReady
clients (such as Secure Clock), device owner's services (Activation /
Provisioning) and content service (License Server). Back in 2022, we reported to Microsoft an issue pertaining to no auth at
PlayReady license server end, which was evaluated by Microsoft as no bug. There is yet another auth issue, which builds on the above and affects
PlayReady Activation...